CVE-2015-10068

A vulnerability classified as critical was found in danynab movify-j. This vulnerability affects the function getByMovieId of the file app/business/impl/ReviewServiceImpl.java. The manipulation of the argument movieId/username leads to sql injection. The name of the patch is c3085e01936a4d7eff1eda3093f25d56cc4d2ec5. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-218476.

• CWE-89

• https://github.com/danynab/movify-j/commit/c3085e01936a4d7eff1eda3093f25d56cc4d2ec5Patch, Third Party Advisory
• https://vuldb.com/?ctiid.218476Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.218476Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/danynab/movify-j/commit/c3085e01936a4d7eff1eda3093f25d56cc4d2ec5Patch, Third Party Advisory
• https://vuldb.com/?ctiid.218476Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.218476Permissions Required, Third Party Advisory, VDB Entry

Published

Jan 18, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-10062A vulnerability, which was classified as problematic, was fo…9.8
• CVE-2015-10063A vulnerability was found in saemorris TheRadSystem and clas…9.8
• CVE-2015-10064A vulnerability was found in VictorFerraresi pokemon-databas…9.8
• CVE-2015-10065A vulnerability classified as critical was found in AenBleid…9.8
• CVE-2015-10066A vulnerability was found in tynx wuersch and classified as …9.8
• CVE-2015-10067A vulnerability was found in oznetmaster SSharpSmartThreadPo…8.1
• CVE-2015-10069A vulnerability was found in viakondratiuk cash-machine. It …9.8
• CVE-2015-1007A specially crafted configuration file could be used to caus…
• CVE-2015-10070A vulnerability was found in copperwall Twiddit. It has been…9.8
• CVE-2015-10071A vulnerability was found in gitter-badger ezpublish-modern-…7.5
• CVE-2015-10072A vulnerability classified as problematic was found in NREL …6.1
• CVE-2015-10073A vulnerability, which was classified as problematic, was fo…9.6